diff --git a/.gitignore b/.gitignore
index 84caa5f..e6a283a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -375,3 +375,4 @@
 /postfix-1.3.1.tar.gz
 /vpn-1.5.2.tar.gz
 /nbde_server-1.3.0.tar.gz
+/nbde_client-1.2.8.tar.gz
diff --git a/CHANGELOG.md b/CHANGELOG.md
index fb491a5..572dae0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,17 @@
 Changelog
 =========
 
+[1.21.0-0.7] - 2022-11-29
+----------------------------
+
+### New Features
+
+- none
+
+### Bug Fixes
+
+- [nbde_client - must handle clevis-luks-askpass and clevis-luks-askpass@ systemd unit names](https://bugzilla.redhat.com/show_bug.cgi?id=2126959)
+
 [1.21.0-0.6] - 2022-11-29
 ----------------------------
 
diff --git a/linux-system-roles.spec b/linux-system-roles.spec
index 5f3785f..85d8606 100644
--- a/linux-system-roles.spec
+++ b/linux-system-roles.spec
@@ -30,7 +30,7 @@ Name: linux-system-roles
 Url: https://github.com/linux-system-roles
 Summary: Set of interfaces for unified system management
 Version: 1.21.0
-Release: 0.6%{?dist}
+Release: 0.7%{?dist}
 
 License: GPLv3+ and MIT and BSD and Python
 %global _pkglicensedir %{_licensedir}/%{name}
@@ -153,7 +153,7 @@ Requires: (ansible-core >= 2.11.0 or ansible >= 2.9.0)
 
 #%%defcommit 12 bef2fad5e365712d1f40e53662490ba2550a253f
 %global rolename12 nbde_client
-%deftag 12 1.2.6
+%deftag 12 1.2.8
 
 #%%defcommit 13 310fc53db04e8d3134524afb7a89b0477a2ffb83
 %global rolename13 certificate
@@ -763,6 +763,9 @@ find %{buildroot}%{ansible_roles_dir} -mindepth 1 -maxdepth 1 | \
 %endif
 
 %changelog
+* Tue Nov 29 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.7
+- Resolves:rhbz#2126959 : nbde_client - must handle clevis-luks-askpass and clevis-luks-askpass@ systemd unit names
+
 * Tue Nov 29 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.6
 - Resolves:rhbz#2133930 : nbde_server - [RFE] convert nbde_server role to use firewall and selinux role
   previous fix was not complete - needed additional fixes - ansible-lint 6.x fixes
diff --git a/sources b/sources
index bf2e48e..170e771 100644
--- a/sources
+++ b/sources
@@ -12,7 +12,7 @@ SHA512 (kdump-1.2.5.tar.gz) = 3f8df4917f8cc2421c8e351f36332e38a18677ce3db135fc5e
 SHA512 (kernel_settings-1.1.10.tar.gz) = e3a2d4298bbe160b106f5b90b2ee065404ca0e437f6928f6fe82aa92b9a9140bda73d16a72f6eab3d5e472fb7f7c0c066918e4dc75b53673a9e7f45b570c33a1
 SHA512 (logging-1.11.2.tar.gz) = 70eeca7470e2a5bfa6f4970e31be7a9864a93160c2730583f48deb8c9ec817ed1afaf960811b8d82027a31888e02794458ce8f1aa060ddf22d542afdb64462b9
 SHA512 (metrics-1.8.0.tar.gz) = 6191f845e0c9919c44ae5a0271f74dcd78d693311a80aec95f8452b9f7f91ea4b8eaab65d2afce370029160bf9ed70095b202dfb63503f015567db39527631e0
-SHA512 (nbde_client-1.2.6.tar.gz) = 0e05735e4de708aa771079ccda75a13db96b565032d465cb9df7f31f8371091b7f297e257ca778e2fbcc6dfd76524f9b35acaae22b55d20dd96c696b84a6d08a
+SHA512 (nbde_client-1.2.8.tar.gz) = 7bbb342533f559f021f8df91a8e267daaa5b14c7afe24a9aec71add48111f0fb2a47bf81a2c0bea2c75b928d8c73582f4433dbf51b08a81fd271d7e913062974
 SHA512 (nbde_server-1.3.0.tar.gz) = 7a5811389e132ab3c9c5b172a764882110a2c7e72d89ff36168d301a27ecbbe78f18a6fd47c7909ea4b32547f32cc5cb0a26083c8c127e8a5ae3c710fc2c3da1
 SHA512 (network-1.10.1.tar.gz) = 5f7b049bf9a2dfc4b2cbce4b019cf02d59e17c378cb2d2790ed1dd0e1d38866b04aa23b73a73b7375aa8d18a173c53e2e2af9ad66f283e1eaf92589cff2d1f01
 SHA512 (podman-1.0.1.tar.gz) = 4e5426e153a41f91c0544d47185e88e4245c7e8649050f4051ef3ff8467cf550bbc89a1ab23b8bb75db822835cdae3944fc2eb769296fb2b41534aee87be9835